CVEs published in May 2007
569 vulnerabilities, 108 critical, 0 exploited.
- xajaxUnspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not...6.8 Medium
- xajaxCross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject...4.3 Medium
- xoops glossaire moduleSQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for...7.5 High
- xoops myconference moduleSQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote...7.5 High
- achievoPHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to...10.0 High
- touteresa resmanagerSQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops...7.5 High
- 3com 3crtpx505-73, 3crx506-96, tippingpoint 200 +5 more +7 moreThe 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode...7.5 High
- jetbox cmsUnrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with...6.0 Medium
- jetbox cmsMultiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to...6.8 Medium
- jetbox cmsCRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to...4.0 Medium
- checkpoint zonealarm, comodo firewall pro, personal firewall +2 moreCheck Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process...7.2 High
- comodo firewall pro, personal firewall +1 moreComodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo...7.2 High
- php, canonical ubuntu linux +1 moreThe soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown...5.0 Medium
- phpThe mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0...2.6 Low
- bitscastBitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an...7.8 High
- db soft lab dewizardxThe DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to...7.5 High
- fotologCross-site scripting (XSS) vulnerability in all_photos.html in fotolog allows remote attackers to...4.3 Medium
- mpc-hc media player classicMedia Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service ...5.5 Medium
- newzcrawlerUnspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service...7.8 High
- vcdgearMultiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to...9.3 High
- png reference library libpngThe png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows...5.0 Medium
- jetbox cmsformmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via...5.8 Medium
- centennial discovery, numara asset manager +1 moreMultiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1)...10.0 High
- jasper jpeg-2000 jpeg-2000The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper)...4.3 Medium
- symantec norton personal firewall, norton internet security +1 moreBuffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal...10.0 High
- group-office groupwareGroup-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to...4.3 Medium
- hp systems insight managerSession fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows...10.0 High
- microsoft internet explorer, stalker communigate pro +1 moreCross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8...4.3 Medium
- igeneric ig shopSQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to...7.5 High
- eqdkpMultiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote...6.8 Medium
- caucho technology resinCaucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote...5.0 Medium
- caucho technology resinDirectory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and...5.0 Medium
- caucho technology resinCaucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote...9.4 High
- snaps gallery galleryAdmin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and...10.0 High
- matt mullenweg akismetUnspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress...10.0 High
- ifusionservices ifdateifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials...10.0 High
- mh software connect dailyUnspecified vulnerability in MH Software Connect Daily before 3.3.3 has unknown impact and attack...10.0 High
- tinyirc tinyidentdStack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute...10.0 High
- nagiosqlPHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and...7.5 High
- nagiosql 2005PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2005 2.00 allows...7.5 High
- feindt computerservice news-scriptPHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News...7.5 High
- linksnet newsfeedPHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0...6.8 Medium
- geeklog media galleryPHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier...7.5 High
- bea weblogic integration, weblogic workshop +1 moreDirectory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before...7.8 High
- bea weblogic serverBEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL...5.4 Medium
- oracle weblogic portalBEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a...3.6 Low
- oracle weblogic portalCross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2...3.5 Low
- bea weblogic serverThe JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6,...4.6 Medium
- bea weblogic serverThe WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic...4.0 Medium
- bea weblogic serverThe Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not...7.1 High
- Show moreLoading…